$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer File: EwgiqaPTOrq2FTetw3QoZxC6DHc.cer (raw, json) Hash identifier: 9CS+hDKMc6K8nQSiednGRVfdsG0Ljw5HgIwACGj6zLc= Subject key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77 Authority key identifier: 6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 Certificate issuer: /CN=A91A73810000/serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Certificate serial: 0F53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Apr 2025 01:31:54 +0000 Certificate not after: Wed 15 Apr 2026 01:30:03 +0000 Subordinate resources: IP: 144.91.128.0 -- 144.91.175.255 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3923 (0xf53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=6F683EAE39A1738AE6C93FDF041F1148E6534DF2 Validity Not Before: Apr 15 01:31:54 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=130822A9A3D33ABAB61537ADC374286710BA0C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:c2:b7:ab:33:88:7b:b5:8b:98:ed:e3:98: 16:b5:25:87:2c:72:bc:e0:e8:cd:6d:52:1f:ab:a8: 01:c4:95:36:9e:65:78:fb:a9:f7:e5:85:f6:32:72: 78:fd:d1:6d:8f:31:4c:3e:07:e0:96:ea:a2:0a:ca: 32:44:c3:72:6b:29:e7:72:25:6a:90:b6:48:21:dc: 0c:b0:75:8c:42:0d:3c:46:e5:c8:32:c0:14:96:82: 7d:b1:72:8e:15:c8:46:5a:e4:39:5f:d1:7a:a9:d7: f1:5d:6a:2a:3d:11:45:a7:dc:b4:ad:76:79:12:9d: 87:1d:4c:b4:a0:9e:96:24:dc:ef:04:e9:01:5d:ce: 8f:8c:20:18:df:cf:38:79:43:19:08:24:f0:e9:ea: 5f:3b:4b:d5:96:bb:0c:40:aa:fe:47:f7:ba:2f:c7: 24:a5:d5:23:5e:30:45:7a:bf:27:34:e4:4c:f4:23: 07:9a:0a:51:90:25:2e:7b:33:d2:e2:84:03:ae:a9: 6f:8d:26:d7:46:c5:2c:a1:2b:d7:1a:de:92:ae:20: e1:0b:3c:75:cc:8f:e5:ab:22:59:d0:7e:72:d3:a1: c7:45:9b:57:72:8e:84:30:e8:11:24:90:6c:4f:61: d4:28:cc:d7:96:fc:51:55:d1:13:dd:de:16:51:33: 3d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77 X509v3 Authority Key Identifier: keyid:6F:68:3E:AE:39:A1:73:8A:E6:C9:3F:DF:04:1F:11:48:E6:53:4D:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.91.128.0-144.91.175.255 Signature Algorithm: sha256WithRSAEncryption 69:ff:8b:a7:20:6c:b3:e0:2b:3d:c0:4a:cf:7d:4b:64:5a:99: 32:5f:b4:10:12:bd:be:32:68:43:c6:b8:cd:ee:02:72:cd:82: 91:21:c1:8e:33:b3:0a:39:f0:27:83:f3:19:27:9c:02:05:cf: d3:d9:0b:3f:1d:3e:0f:01:f3:2f:a7:4e:07:44:8e:40:2f:56: 77:91:50:b1:f1:f2:10:1a:11:d0:c6:41:a0:50:4e:87:0c:44: fa:ef:8d:ac:3d:fc:e3:52:57:51:03:5d:fb:13:cc:69:7e:a5: 34:b5:75:bf:54:c8:5b:6c:b1:6d:28:03:15:b3:3b:3d:dc:a3: 9b:f8:ac:9b:a0:d3:c2:f6:72:df:d4:b8:98:4d:7a:bc:30:92: 48:1d:eb:b0:ae:b2:7f:96:85:6c:d8:eb:d5:73:6a:db:59:d9: 82:53:9f:a3:df:4d:15:15:1d:c5:c5:95:e6:e7:95:3e:bc:2a: 8d:c7:c4:9b:85:78:2d:28:fd:28:ff:a1:4c:31:ef:08:82:59: 59:61:e0:b2:b7:7d:61:3a:a9:e7:7a:31:a0:93:cb:0e:ff:15: d9:9d:e2:66:f1:ae:02:9f:5e:04:1b:ac:26:c0:b8:81:69:4d: 46:bb:94:7f:c5:3b:76:c6:68:7e:7c:b2:f2:17:0c:b8:7a:1c: 48:91:35:3b -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICD1MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyg2RjY4M0VBRTM5QTE3MzhBRTZDOTNGREYwNDFG MTE0OEU2NTM0REYyMB4XDTI1MDQxNTAxMzE1NFoXDTI2MDQxNTAxMzAwM1owMzEx MC8GA1UEAxMoMTMwODIyQTlBM0QzM0FCQUI2MTUzN0FEQzM3NDI4NjcxMEJBMEM3 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxPwrerM4h7tYuY7eOY FrUlhyxyvODozW1SH6uoAcSVNp5lePup9+WF9jJyeP3RbY8xTD4H4JbqogrKMkTD cmsp53IlapC2SCHcDLB1jEINPEblyDLAFJaCfbFyjhXIRlrkOV/ReqnX8V1qKj0R RafctK12eRKdhx1MtKCeliTc7wTpAV3Oj4wgGN/POHlDGQgk8OnqXztL1Za7DECq /kf3ui/HJKXVI14wRXq/JzTkTPQjB5oKUZAlLnsz0uKEA66pb40m10bFLKEr1xre kq4g4Qs8dcyP5asiWdB+ctOhx0WbV3KOhDDoESSQbE9h1CjM15b8UVXRE93eFlEz PdsCAwEAAaOCApMwggKPMB0GA1UdDgQWBBQTCCKpo9M6urYVN63DdChnELoMdzAf BgNVHSMEGDAWgBRvaD6uOaFziubJP98EHxFI5lNN8jAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYjJnLXJqbWhjNHJteVRfZkJC OFJTT1pUVGZJLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFD ODgzN0M3MkZEMUZGMi9iMmctcmptaGM0cm15VF9mQkI4UlNPWlRUZkkuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAxMDIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMTAyL0V3 Z2lxYVBUT3JxMkZUZXR3M1FvWnhDNkRIYy5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEB5BbgAMEBJBboDAN BgkqhkiG9w0BAQsFAAOCAQEAaf+LpyBss+ArPcBKz31LZFqZMl+0EBK9vjJoQ8a4 ze4Ccs2CkSHBjjOzCjnwJ4PzGSecAgXP09kLPx0+DwHzL6dOB0SOQC9Wd5FQsfHy EBoR0MZBoFBOhwxE+u+NrD3841JXUQNd+xPMaX6lNLV1v1TIW2yxbSgDFbM7Pdyj m/ism6DTwvZy39S4mE16vDCSSB3rsK6yf5aFbNjr1XNq21nZglOfo99NFRUdxcWV 5ueVPrwqjcfEm4V4LSj9KP+hTDHvCIJZWWHgsrd9YTqp53oxoJPLDv8V2Z3iZvGu Ap9eBBusJsC4gWlNRruUf8U7dsZofnyy8hcMuHocSJE1Ow== -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:02 2025 by rpki-client on console.sobornost.net